Session Cookie Persistence Vulnerability in BIG-IP Configuration Utility on VIPRION Platform

Session Cookie Persistence Vulnerability in BIG-IP Configuration Utility on VIPRION Platform

CVE-2023-40537 · HIGH Severity

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

An authenticated user's session cookie may remain valid for a limited time after logging out from the BIG-IP Configuration utility on a multi-blade VIPRION platform.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

Learn more about our User Device Pen Test.